This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer File: m9bIYDQsx5nCgHT2mXaKjsvapS4.cer (raw, json) Hash identifier: PwaZOVsgYO/V1xXXxfUmdzV9WlpugFz7U4X3joeo/yE= Subject key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E383E82BD561B6FD257ED58F3D343C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56642 IP: 92.118.152.0/22 IP: 185.155.248.0/22 IP: 2a09:ae40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3e:82:bd:56:1b:6f:d2:57:ed:58:f3:d3:43:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:87:e5:2f:0d:a3:cf:84:ac:db:fe:53:c1: a3:7d:22:52:49:fd:80:1e:7a:8d:26:78:28:4a:0f: 7c:de:ce:20:84:51:c0:cb:24:85:23:cc:b3:c9:c4: 5a:33:6a:f2:b4:38:d6:e2:63:f6:92:25:91:a7:d6: 1e:e1:75:d4:e0:5d:67:0a:e2:e0:d8:bf:e4:be:3b: 2b:de:a1:1a:13:ff:11:8f:04:c1:55:64:f2:1c:e1: 43:48:25:a9:87:1e:c8:78:71:b2:51:b1:88:18:5c: 22:32:14:d6:53:ca:90:94:fc:3a:f5:94:75:7b:3c: 63:2a:9b:82:ba:91:c8:29:e6:71:17:9c:d8:17:5a: 8b:fd:4d:d5:39:38:36:57:bd:d3:31:57:e0:f2:24: 6c:23:4c:2b:9c:ec:35:ec:41:29:18:0e:5f:f6:7c: 62:c3:8f:f6:91:5e:e4:9c:87:a9:ac:6a:b5:f2:cb: 11:8c:c6:9e:0f:5e:1a:99:63:bb:b6:41:25:57:c0: db:66:52:4e:81:24:36:88:57:a3:5e:6d:d8:13:ea: 4d:15:d5:eb:c4:64:28:bf:ae:0d:01:a6:53:a8:b1: 9d:6c:ad:24:3c:8f:1e:d9:0f:1b:56:82:22:33:ed: 92:9f:14:04:53:e1:37:ce:4c:7b:f3:b6:08:ea:af: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.152.0/22 185.155.248.0/22 IPv6: 2a09:ae40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56642 Signature Algorithm: sha256WithRSAEncryption 16:19:34:e0:55:93:e7:cc:80:f9:f9:4d:cf:22:41:bb:49:da: 0a:37:de:a7:0e:9f:6c:42:3d:57:04:ef:db:0c:56:64:f4:f2: 87:c3:56:1f:4a:d3:de:f1:c8:9b:b5:43:e6:93:c4:ed:57:24: 70:02:3e:ee:c4:0a:54:f2:8d:9b:b5:45:58:1e:a3:55:89:4b: c7:60:40:9e:d0:a8:57:c1:7f:09:af:cb:60:5a:8f:77:38:b3: 8c:34:6d:36:3e:ad:be:e7:b4:91:ae:d0:60:a0:dc:c3:53:db: 81:a7:0f:04:cd:e0:ad:b8:85:af:d4:18:ec:e9:cd:58:52:74: f5:69:30:9a:e8:80:02:20:d1:d2:96:d9:82:7d:87:26:ed:63: 89:20:5b:fe:ad:6c:8a:3b:84:9c:aa:04:50:a0:07:93:ac:5c: 06:0b:ee:d1:6c:6b:8f:e8:8b:96:13:34:ee:ee:2e:57:c2:84: bb:82:33:c3:d8:6f:52:bf:ba:98:54:aa:58:94:0e:b7:b6:4e: 47:4b:58:87:e6:06:0e:4c:7f:78:a8:79:0e:55:43:2b:ae:60: a0:d0:f9:86:d2:d3:5b:6e:f4:13:79:49:53:4a:30:26:3b:86: fc:40:72:de:29:41:9a:c0:32:a8:ef:c9:74:f7:d6:45:09:97: a5:c0:4f:78 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OD6CvVYbb9JX7Vjz00PDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmQ2Yzg2MDM0MmNjNzk5YzI4MDc0ZjY5OTc2OGE4ZWNiZGFhNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg+H5S8No8+ErNv+U8GjfSJSSf2A HnqNJngoSg983s4ghFHAyySFI8yzycRaM2rytDjW4mP2kiWRp9Ye4XXU4F1nCuLg 2L/kvjsr3qEaE/8RjwTBVWTyHOFDSCWphx7IeHGyUbGIGFwiMhTWU8qQlPw69ZR1 ezxjKpuCupHIKeZxF5zYF1qL/U3VOTg2V73TMVfg8iRsI0wrnOw17EEpGA5f9nxi w4/2kV7knIeprGq18ssRjMaeD14amWO7tkElV8DbZlJOgSQ2iFejXm3YE+pNFdXr xGQov64NAaZTqLGdbK0kPI8e2Q8bVoIiM+2SnxQEU+E3zkx787YI6q840wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJvWyGA0LMeZwoB09pl2io7L2qUuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2FmYTY5 ZC1lMTQzLTRiZjctYjc0My00MmUzZWY0ZjhiOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvYWZhNjlk LWUxNDMtNGJmNy1iNzQzLTQyZTNlZjRmOGI5MS8xL205YklZRFFzeDVuQ2dIVDJt WGFLanN2YXBTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCXHaYAwQCuZv4MA0EAgACMAcDBQMqCa5AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDdQjANBgkqhkiG9w0BAQsFAAOCAQEAFhk0 4FWT58yA+flNzyJBu0naCjfepw6fbEI9VwTv2wxWZPTyh8NWH0rT3vHIm7VD5pPE 7VckcAI+7sQKVPKNm7VFWB6jVYlLx2BAntCoV8F/Ca/LYFqPdzizjDRtNj6tvue0 ka7QYKDcw1PbgacPBM3grbiFr9QY7OnNWFJ09WkwmuiAAiDR0pbZgn2HJu1jiSBb /q1sijuEnKoEUKAHk6xcBgvu0Wxrj+iLlhM07u4uV8KEu4Izw9hvUr+6mFSqWJQO t7ZOR0tYh+YGDkx/eKh5DlVDK65goND5htLTW270E3lJU0owJjuG/EBy3ilBmsAy qO/JdPfWRQmXpcBPeA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:21 2026 by rpki-client